Edimax Br-6208Ac vulnerabilities

CVE-2025-15256 [CRITICAL] CWE-74 CVE-2025-15256: A vulnerability was identified in Edimax BR-6208AC 1.02/1.03. Affected is the function formStaDrvSet A vulnerability was identified in Edimax BR-6208AC 1.02/1.03. Affected is the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component Web-based Configuration Interface. The manipulation of the argument rootAPmac leads to command injection. Remote exploitation of the attack is possible. The exploit is publicly available and mig

CVE-2025-15257 [CRITICAL] CWE-74 CVE-2025-15257: A security flaw has been discovered in Edimax BR-6208AC 1.02/1.03. Affected by this vulnerability is A security flaw has been discovered in Edimax BR-6208AC 1.02/1.03. Affected by this vulnerability is the function formRoute of the file /gogorm/formRoute of the component Web-based Configuration Interface. The manipulation of the argument strIp/strMask/strGateway results in command injection. The attack can be executed remotely. The exploit has bee

CVE-2026-7685 [HIGH] CWE-119 CVE-2026-7685: A vulnerability was detected in Edimax BR-6208AC up to 1.02. Affected is an unknown function of the A vulnerability was detected in Edimax BR-6208AC up to 1.02. Affected is an unknown function of the file /goform/setWAN. Performing a manipulation of the argument pptpDfGateway results in buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respo

CVE-2026-1972 [HIGH] CWE-1392 CVE-2026-1972: A vulnerability was found in Edimax BR-6208AC 2_1.02. The affected element is the function auth_chec A vulnerability was found in Edimax BR-6208AC 2_1.02. The affected element is the function auth_check_userpass2. Performing a manipulation of the argument Username/Password results in use of default credentials. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor confirms that the affected product is end

CVE-2026-7682 [MEDIUM] CWE-74 CVE-2026-7682: A security flaw has been discovered in Edimax BR-6208AC 1.02. The impacted element is the function s A security flaw has been discovered in Edimax BR-6208AC 1.02. The impacted element is the function setWAN of the file /goform/setWAN of the component L2TP Mode. The manipulation of the argument L2TPUserName results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks

CVE-2025-14910 [MEDIUM] CWE-22 CVE-2025-14910: A vulnerability was detected in Edimax BR-6208AC 1.02. This impacts the function handle_retr of the A vulnerability was detected in Edimax BR-6208AC 1.02. This impacts the function handle_retr of the component FTP Daemon Service. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. Edimax confirms this issue: "This product is no longer available in the market and has been discont

CVE-2025-15258 [MEDIUM] CWE-601 CVE-2025-15258: A weakness has been identified in Edimax BR-6208AC 1.02/1.03. Affected by this issue is the function A weakness has been identified in Edimax BR-6208AC 1.02/1.03. Affected by this issue is the function formALGSetup of the file /goform/formALGSetup of the component Web-based Configuration Interface. This manipulation of the argument wlan-url causes open redirect. The attack is possible to be carried out remotely. The exploit has been made available